Detecting Forged Purchase Orders & End Use Certificates

Export compliance teams use document verification to catch forged purchase orders (POs) and end-use certificates (EUCs). This guide explains the red flags, cross-checking methods, and verification steps that help you identify fraudulent documents before they cause a compliance breach.

What You’ll Need

• The original PO or EUC in PDF or paper form (not just a scanned copy)
• Access to your company’s CRM or order management system
• A copy of the end-user’s official registration documents (e.g., business license, tax ID)
• Email headers or communication logs with the buyer
• Export control classification numbers (ECCN) for your product
• Internet access to check government denied-party lists
• A magnifying glass or image editing software for examining document details

Step-by-Step

1. Verify the document’s source. Check the sender’s email domain against the company’s official domain. Look for subtle misspellings (e.g., “gmial.com” instead of “gmail.com”). If the document came by fax or mail, verify the phone number or address independently via a web search.
2. Examine the document’s metadata. Open the PDF in a viewer that shows metadata (like Adobe Acrobat). Look at the “Created” and “Modified” dates. A forged document often shows a creation date different from the stated issue date, or a modification date after the signature date.
3. Inspect fonts and alignment. Forged documents often have inconsistent fonts, misaligned text, or blurry logos. Compare the font style and size with a known sample from the same company. Use image editing to zoom in on the signature and logo—jagged edges or pixelation suggest a copy-paste job.
4. Check the purchase order number. Call the buyer’s procurement department using a phone number from their official website (not the one on the document). Ask them to confirm the PO number, the amount, and the delivery terms. If they have no record, it’s a red flag.
5. Verify the end user’s identity. For an EUC, confirm the end user is a real, operating entity. Check their website, business registration, and physical address via satellite maps. If the address is a residential home or a virtual office, that’s suspicious.
6. Cross-check the end use and end user. Ensure the stated end use is consistent with the product’s capabilities and the end user’s industry. For example, a high-precision CNC machine claimed for “textile production” is a red flag.
7. Run denied-party screening. Check the end user, buyer, and any intermediaries against your government’s denied-party lists (e.g., BIS’s Consolidated Screening List in the US). Even if the names match exactly, also check for similar names with slight variations.
8. Verify the signature and stamp. Compare the signature on the document with any previous signatures from the same person. If you have no sample, ask for a notarized copy or a video call with the signer. Check that the company stamp is embossed or has a wet ink feel—digital stamps are often too uniform.
9. Analyze the language and grammar. Forged documents often contain awkward phrasing, incorrect legal terminology, or inconsistent date formats. Native speakers of the language can spot these errors. If the document is in a language you don’t know, have a colleague or translator review it.
10. Check the document’s logic. Look for unrealistic quantities, prices, or delivery dates. For instance, a PO for 10,000 units with a delivery date of tomorrow is a red flag. Also, check that the totals add up correctly—a forged document may have arithmetic errors.
11. Request additional documentation. Ask for a bank letter of credit, a customs broker’s contact, or a signed end-use statement on the company’s letterhead. Legitimate buyers will provide these; fraudsters often hesitate or provide fake ones.
12. Use a document verification service. If you have access to a service like a certified document examiner or a forensic analysis tool, use it. These services can detect alterations, ink inconsistencies, and digital manipulation.

Common Mistakes

• Relying solely on email verification. An email from a spoofed address can look legitimate. Always verify the sender via a second channel (phone call to a known number).
• Ignoring minor inconsistencies. A tiny font difference or a slightly off-center logo might be the only clue. Document examiners often catch forgeries by these details.
• Not checking the end user’s actual existence. A company with a website and a phone number may still be a shell entity. Verify their physical presence and business activity.
• Overlooking the end use. Even if the end user is real, the stated end use may be false. Always assess whether the product makes sense for the claimed application.
• Assuming a notary signature is proof. Notary stamps can be forged too. Verify the notary’s commission with the state or country’s notary database.
• Skipping the denied-party list. This is a basic step, but it’s often forgotten for EUCs from new customers. Always screen every party in the transaction.

Tips

• Create a verification checklist. Standardize your process so every PO and EUC goes through the same checks. This reduces the chance of missing a step.
• Use a secure portal for document exchange. If possible, have buyers upload documents through a secure portal that requires authentication. This reduces the risk of email interception.
• Keep samples of known legitimate documents. Store copies of POs and EUCs from trusted customers to use as reference for fonts, signatures, and formats.
• Train your staff. Make sure everyone who handles export documents knows the red flags and the verification steps. Regular training helps maintain vigilance.
• Document your verification. Keep a log of who you contacted, when, and what they confirmed. This is crucial for audits and for demonstrating due diligence.
• Trust your instincts. If something feels off, it probably is. Don’t be afraid to escalate to a supervisor or compliance officer.

Troubleshooting

What if the buyer is unresponsive? If you can’t reach the buyer to verify the PO, delay the shipment. Send a polite email asking for confirmation, and try calling their main switchboard. If they don’t respond within a reasonable time, treat it as a red flag and escalate.

What if the document looks perfect but the end user is suspicious? Even if the document is flawless, you must verify the end user. Use online business registries, check their website’s domain age, and look for news articles. If you still have doubts, request a letter of credit from a bank or a compliance certification from a third party.

What if you find a discrepancy after the shipment? If you discover a forgery after the goods have shipped, immediately notify your export compliance officer and the relevant government authority. They will advise on next steps, which may include a voluntary disclosure. Do not try to handle it alone.

What if the buyer claims the document is legitimate but the verification fails? Give them a chance to provide additional evidence, such as a copy of their internal PO system or a direct call with their procurement manager. If they can’t, refuse the transaction and document the reason.

Frequently Asked Questions

1. Can a forged PO be detected by the naked eye? Often, yes, if you know what to look for: inconsistent fonts, misaligned text, blurry logos, or unusual grammar. However, some forgeries are very sophisticated, so use a combination of visual inspection and verification.
2. What’s the difference between a purchase order and an end-use certificate? A PO is a commercial document from a buyer to a seller, specifying goods and prices. An EUC is a government/customs document that declares the end user and end use of controlled items, often required for export licenses.
3. Is it legal to call the buyer to verify a PO? Yes, it’s a standard business practice. Just be careful not to share sensitive information unless you’ve confirmed the person’s identity.
4. How long does a typical verification take? It depends on the complexity. A simple phone call can take 10 minutes, but a full verification with a site visit could take days. For most transactions, a few hours are enough.
5. What if the buyer refuses to provide additional documentation? That’s a major red flag. Legitimate buyers understand compliance needs. If they refuse, you should not proceed with the shipment.
6. Can I use software to detect forged documents? Yes, there are forensic tools that analyze metadata, compression levels, and pixel patterns. However, they are not foolproof and should be used alongside manual checks.

Related

• How to Choose a TV for Offline Viewing & Local Media
• MW4 Multiplayer: Is It Worth Buying?
• Session1 Initialization Failed: Causes and Fixes